Privacy Policy

Overview

Anonium does not ask for your name, email address, phone number, password or social profile. It does not use advertising trackers and does not sell personal information.

Information involved in the service

Depending on how you use Anonium, the service may process:

• a random account identifier, created when you first open the app, and the public encryption key your device generates;
• your links and their settings, such as a label or prompt you choose, whether a link is active or paused, and your @username if you have one;
• the notification token your phone provides, and whether it is an Android or iPhone device, so messages reach you;
• encrypted messages that are waiting to be delivered (see below);
• subscription status and purchase references supplied by Google Play or the App Store;
• limited connection, security and diagnostic information needed for reliability, abuse prevention and troubleshooting; and
• the content and reason you deliberately submit when reporting a message.

Anonium does not request access to your contacts, location, camera, microphone, photos or general device storage.

Messages

Message content is encrypted on the sending device before it reaches us, and we do not hold the keys to read it. Your conversations, drafts and preferences are stored on your device. Anonium does not offer a cloud backup of your chats and cannot restore history that has been erased from a phone.

Messages are passed on as soon as possible. When a phone cannot receive a message straight away, for example while an iPhone app is closed, or when a message is sent from the web, the encrypted message is held on our servers until the recipient's app collects it, and is then deleted. Messages that are never collected are deleted automatically within 14 days. Push notifications sent through Google and Apple never carry readable message text.

If you choose to report a message, the message and a small amount of surrounding context are sent to us in readable form so a person can review them. Do not include anything in a report that is not needed to explain the problem.

Sending from the web

People can message you from a browser without installing Anonium. The message is encrypted in their browser before it is sent. To let them read your reply and continue the chat, the sender page stores a small first-party cookie in their browser, and they can choose to receive browser notifications. To limit spam, the service uses a security check from Cloudflare and keeps a one-way hashed form of the network address used to send. None of this is used to identify the sender to you.

How information is used

Information is used to provide your links, deliver messages and notifications, confirm subscriptions, keep the service secure and reliable, investigate reports, enforce the terms, comply with lawful obligations and improve app stability. It is not used for advertising or profiling.

Legal bases for processing

For people in the United Kingdom, the European Economic Area and other places with comparable law, each activity below has a legal basis:

• Performance of a contract — running your links and @username, delivering messages and notifications, and confirming subscription status, so the service you asked for works.
• Legitimate interests — keeping the service secure and available, preventing spam, abuse and automated attacks, investigating reports, and diagnosing crashes. We weigh this against your privacy by holding as little as the job allows and never building a profile of you.
• Legal obligation — responding to valid legal process, and reporting child sexual abuse material where the law requires it.
• Consent — where your device asks you separately, such as permission to show notifications. You can withdraw it at any time in your device or browser settings.

Service providers

Anonium relies on service providers for hosting, website delivery and security checks (Cloudflare), sign-in, push notifications and crash diagnostics (Google Firebase, which uses Apple's push service for iPhones), and app-store billing (Google Play and the Apple App Store). They process limited technical information under their own terms and applicable data-protection requirements.

Anonium does not sell personal information or use it for cross-context behavioural advertising.

Where information is processed

Anonium is operated from Pakistan, and its servers and service providers operate infrastructure in the European Union, the United States and elsewhere. Using Anonium therefore involves transferring limited operational information outside your own country, including outside the United Kingdom and the European Economic Area.

Where a destination has not been found to provide an equivalent level of protection, we rely on appropriate safeguards offered by those providers, such as standard contractual clauses, together with the fact that message content is encrypted before it reaches us. You can ask for more detail using the contact details below.

Requests for information about a user

Because Anonium does not collect names, email addresses or phone numbers, and cannot read message content, we are not able to tell anyone who sent a message. We respond to valid legal process from an authority with jurisdiction over us and, where the law requires it, preserve and disclose the limited information we actually hold. Requests that are not valid legal process are declined.

Sponsored placements

Anonium uses no advertising network, advertising identifier or behavioural targeting. A limited sponsor panel may help fund the service. Sponsors receive no personal information; engagement is counted only in aggregate.

Retention and security

• Your account, links and @username are kept while you use Anonium and are deleted when you choose Erase everything in the app.
• Encrypted messages waiting for delivery are deleted once collected, and within 14 days at most.
• Reports are kept only as long as needed to review and act on them, or longer where the law requires.
• Security and diagnostic records are kept for a limited period and then deleted or aggregated.

Deleted information may remain in routine backups for a short time before they are overwritten. Reasonable technical and organisational safeguards are used, but no service or device can be guaranteed completely secure.

Deletion and your rights

You can pause or replace a link at any time, and Erase everything in the app deletes your account and its server data and wipes the chats on that phone. See the deletion guide for details.

Depending on where you live — and in the UK and EEA in every case — you also have the right to:

• ask what personal information we hold about you, and get a copy of it;
• have inaccurate information corrected;
• have information erased;
• ask us to restrict how we use it;
• object to processing we carry out on the basis of legitimate interests;
• receive information you gave us in a portable, machine-readable form; and
• withdraw any consent you have given, at any time.

Write to the address below and we will answer within one month. We will not charge you or treat you differently for asking. Because Anonium has no conventional accounts, we may only be able to act on a request that can be linked to an installation, and we will not ask you for extra identifying information to do so.

If you are unhappy with how we have handled your information, you can complain to your local data-protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk); in the EEA it is the supervisory authority for the country you live or work in.

Automated enforcement

Anonium applies automatic protections such as rate limits, spam and abuse signals, and a standing score that can restrict an account that is reported repeatedly. If a restriction has been applied to you and you believe it is wrong, write to us: a person will look at it, and you can give us your side.

Children and child safety

Anonium is intended for adults aged 18 and older. We operate a zero-tolerance policy toward child sexual abuse and exploitation. See our child safety standards.

Changes

This policy may be updated as the service or legal requirements change. The effective date above identifies the current version, and material changes will be communicated where required.

Who is responsible, and how to reach us

Anonium is operated by Modullium, a sole trader. The data controller for the purposes of the UK GDPR and the EU GDPR is:

Privacy questions, rights requests and complaints can all be sent to that email address.